File: var_kube_authorization_mode.var

package info (click to toggle)
scap-security-guide 0.1.79-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 114,704 kB
  • sloc: xml: 244,677; sh: 84,647; python: 33,203; makefile: 27
file content (24 lines) | stat: -rw-r--r-- 836 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
documentation_complete: true

title: 'kubelet - Authorization Options'

description: |-
    ABAC - Attribute-Based Access Control (ABAC) mode allows you to configure policies using local files.
    <br />RBAC - Role-based access control (RBAC) mode allows you to create and store policies using the Kubernetes API.
    <br />Webhook - WebHook is an HTTP callback mode that allows you to manage authorization using a remote REST endpoint.
    <br />Node Node - authorization is a special-purpose authorization mode that specifically authorizes API requests made by kubelets.
    <br />AlwaysDeny - This flag blocks all requests. Use this flag only for testing.

type: string

operator: equals

interactive: false

options:
    default: Webhook
    abac: ABAC
    rbac: RBAC
    webhook: Webhook
    node: Node
    alwaysdeny: AlwaysDeny